Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/V2X4axORSfdzZD5V0HVW3kuVBCc.roa
File: V2X4axORSfdzZD5V0HVW3kuVBCc.roa (raw, json)
Hash identifier: PGmZdbKtvuZqFdktHaioQsXkpEThI9+ksnMVQrz6rSU=
Subject key identifier: 57:65:F8:6B:13:91:49:F7:73:64:3E:55:D0:75:56:DE:4B:95:04:27
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 134C5947
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/V2X4axORSfdzZD5V0HVW3kuVBCc.roa
Signing time: Sat 01 Jan 2022 05:54:02 +0000
ROA not before: Sat 01 Jan 2022 05:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21104
IP address blocks: 185.86.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323770695 (0x134c5947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 1 05:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5765f86b139149f773643e55d07556de4b950427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:76:be:57:86:18:45:ee:7f:99:f3:61:8f:
b3:4d:2a:d8:6a:7a:58:58:d0:e7:2f:33:9d:d1:52:
51:6d:a9:9f:f3:76:57:99:7c:87:cd:b4:4a:04:6c:
fd:49:1a:3b:8e:15:cf:54:99:37:e3:2c:60:4b:8c:
08:5e:82:03:41:a1:a2:e2:64:38:27:b3:8d:fe:0e:
78:c4:84:4b:79:7b:a4:7d:30:63:1a:53:94:c6:c6:
e1:31:1c:9c:69:93:3b:10:06:a1:72:f1:e6:6e:ec:
aa:76:09:07:35:08:27:66:6c:ea:37:6f:59:90:53:
5b:ef:23:36:6e:9b:2d:36:2d:9a:87:00:15:62:a1:
73:b5:b7:25:15:88:7a:5b:01:c6:3e:9c:67:65:09:
ae:c0:92:ab:71:63:8d:f2:b5:1d:49:a4:b0:0f:4c:
48:2c:1f:cb:df:b7:72:b9:9c:a8:c7:8e:bb:e1:1b:
4b:5b:d8:ea:b6:b3:09:ad:78:ed:a9:ab:f6:3f:98:
25:5f:f4:89:b5:28:37:cc:7f:27:03:86:a6:05:6e:
aa:ec:dc:04:11:3e:00:45:1b:33:5d:e9:d4:ee:1f:
3d:74:e7:7b:ed:8f:39:30:3b:77:24:47:dc:c3:ba:
a3:b3:9c:88:bc:dd:46:3e:84:17:90:81:54:2d:e4:
49:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:65:F8:6B:13:91:49:F7:73:64:3E:55:D0:75:56:DE:4B:95:04:27
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/V2X4axORSfdzZD5V0HVW3kuVBCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f5:ac:20:15:d2:e4:0f:a5:09:f9:66:cd:c0:2e:67:51:4d:
4d:e6:2d:93:28:de:ef:69:0f:31:94:61:65:5b:1b:87:46:d8:
dc:4f:ab:16:2e:33:04:1a:85:bb:2c:be:ed:76:bf:ab:dd:13:
6c:8e:ae:59:54:d9:61:d4:c6:f9:a4:12:57:82:e6:4b:93:08:
05:e3:6c:23:9e:cf:e1:9f:e0:12:f7:90:a0:2b:f8:4e:07:87:
3a:09:fc:10:29:ff:0d:84:93:ef:22:4e:0c:0b:72:f7:03:e8:
d1:fd:e5:0b:48:92:3f:ba:8a:98:8f:19:00:a5:af:1e:24:97:
a8:74:16:cc:c0:b7:48:8f:bf:cd:f0:d9:4c:0a:00:e7:14:df:
c9:75:84:c7:50:48:96:6e:07:84:b0:56:28:c6:10:5f:08:ae:
bf:48:20:9e:bc:af:e3:6b:a2:ea:4f:c9:90:c4:4c:14:e5:cb:
8e:9c:15:31:ca:3e:f0:23:bc:c3:80:a5:4a:f9:aa:c2:65:67:
c7:6b:c2:88:c3:8a:76:e8:91:bd:0d:6f:c8:f5:b2:f0:88:c3:
4b:82:c9:e6:1c:73:9e:33:08:b8:9c:fc:63:28:10:7c:c6:ef:
83:a5:7a:19:74:e2:2d:28:09:6c:0e:6c:f3:20:69:f1:ff:c3:
66:0c:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-ams.rpki-client.org